Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/6HOqjlFnuttygz9FJIGySiBVFhM.roa
File: 6HOqjlFnuttygz9FJIGySiBVFhM.roa (raw, json)
Hash identifier: hd0QVeaNlVvI8RsipKDHq8zjnXMj6UG6a3yRgGM3WMI=
Subject key identifier: E8:73:AA:8E:51:67:BA:DB:72:83:3F:45:24:81:B2:4A:20:55:16:13
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 0192D3F22E9E8D78B392A978D1478C4CBC5E
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/6HOqjlFnuttygz9FJIGySiBVFhM.roa
Signing time: Mon 28 Oct 2024 16:25:17 +0000
ROA not before: Mon 28 Oct 2024 16:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 216.25.124.0/24 maxlen: 24
216.25.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:f2:2e:9e:8d:78:b3:92:a9:78:d1:47:8c:4c:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Oct 28 16:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e873aa8e5167badb72833f452481b24a20551613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:e8:a5:c7:8c:31:20:38:8a:e9:fb:f8:59:
8e:cc:99:aa:9e:23:7c:e2:f1:a2:90:d4:4d:9b:23:
3f:e3:5f:73:2d:54:d9:4f:61:c4:14:95:71:62:33:
94:28:8f:ed:b0:7b:e9:a1:d1:5f:22:0c:7a:05:d9:
3e:f2:e9:01:31:e9:5b:6b:07:bb:e7:18:a2:8d:8a:
05:d5:e4:08:8a:18:65:e5:03:26:59:16:b1:aa:3b:
0e:d4:63:c6:7a:ec:52:79:5f:66:9d:49:af:59:76:
95:03:e4:97:e7:11:2b:e5:c0:b9:2d:a6:bc:96:1e:
be:a3:0a:92:d6:ab:67:1b:33:bc:45:cb:bf:58:a8:
bc:89:94:39:25:96:15:ca:a9:91:41:6a:d5:c0:f0:
96:15:3b:c2:9d:71:c0:a5:3e:99:bb:04:a9:cd:11:
60:85:76:fa:ac:08:df:0e:b3:92:6d:63:71:1c:9f:
85:9b:b3:d0:f6:59:e5:4e:f8:2a:ab:e8:b9:cc:1c:
37:37:1e:ca:ae:e9:53:e1:f7:c8:da:7f:e0:b6:38:
33:47:ff:a2:41:56:46:81:cb:0c:f2:66:91:b4:1c:
cd:24:bf:7f:31:2b:39:59:03:66:6b:5b:96:8a:8d:
a5:18:de:84:6b:c1:dc:09:45:c0:10:4a:c5:da:05:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:73:AA:8E:51:67:BA:DB:72:83:3F:45:24:81:B2:4A:20:55:16:13
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/6HOqjlFnuttygz9FJIGySiBVFhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.25.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:67:76:f2:ef:5b:e8:70:4f:0b:fc:bb:e7:9a:c2:c6:d5:f1:
90:8a:a4:6f:1f:d9:09:ea:ad:19:41:cf:e9:cb:6b:8b:a7:45:
d4:4d:0c:6e:a8:aa:4b:cd:dc:1f:61:70:46:36:f4:0d:2f:9c:
cd:62:ec:54:bd:92:d5:8c:a1:31:98:e4:55:f2:24:54:65:d1:
5c:43:18:e8:7e:f9:24:e0:88:24:46:a0:a5:f8:ff:5c:d4:40:
e3:1a:5d:d0:19:5a:9c:69:16:f0:7a:ac:ac:18:fb:23:d8:79:
b9:c2:6d:85:03:e7:85:44:60:84:d9:96:86:ff:81:9e:66:a3:
3b:e8:22:fd:69:9d:ca:e0:07:20:39:e1:88:4c:84:95:3d:88:
4c:c5:51:f4:9f:2b:4d:bc:b7:26:cc:66:cd:b0:bd:b1:ed:4c:
f4:87:d3:1d:c6:23:3b:b2:61:14:55:cf:d5:9c:73:e1:1c:0b:
7c:ed:c4:5f:a4:61:9e:4c:09:c5:ba:3b:d4:4a:61:bd:8a:74:
a4:8b:e7:be:61:6a:57:c1:21:35:a2:4c:60:ec:41:ac:e9:19:
91:b7:da:5d:3f:53:f0:9a:47:25:83:06:05:19:70:50:75:35:
68:19:f8:a3:c2:4f:c7:06:49:36:15:80:ad:8e:cb:d2:3a:9b:
a9:b6:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:20:38 2024 by rpki-client on console-ams.rpki-client.org